Secunia Logo
 
CVE Reference: CVE-2008-0575
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-0575

Description:
Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmin privilege level to arbitrary accounts as administrators via an "update member" action.

CVE Status:
Candidate

References:

SREASON
  http://securityreason.com/securityalert/3606

SAID
  Secunia Advisory: SA28684

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/487312/100/0/threaded


Return to the previous page.